{"id":"CVE-2026-106228","published":"2026-10-06T19:17:49.563","lastModified":"2026-10-07T18:04:58.780","description":"Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","cvssScore":8.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-441"],"vendors":["google"],"products":["chrome"],"references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://issues.chromium.org/issues/517689673","tags":["Permissions Required"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A confused deputy vulnerability in Google Lens allowed attackers who compromised the renderer process to execute arbitrary code outside the sandbox, potentially leading to full system compromise. This affects Chrome versions prior to 155.0.8059.39.","exploitability":"Exploitation requires compromising the renderer process first, then crafting a malicious HTML page that tricks the browser into executing code outside the sandbox, making it moderately difficult but possible with a multi-stage attack.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on the user's system with full privileges, potentially leading to data theft, system takeover, or further lateral movement within the network.","remediation":"Upgrade to Chrome version 155.0.8059.39 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sandbox-escape","confused-deputy","chrome"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:56:10.758Z"}}